Job Description

Position- Security Controls Validation Engineer (OPS)

n

Exp- 6+yrs

n

Skill- PKI & HSM

n

Job Type- Contract

n

Location- Melbourne

n

JD-

n

It is responsible for the design, implementation, enablement, and ongoing operation of enterprise PKI and certificate lifecycle management solutions. This role will support a long‑term, multi‑phase PKI improvement initiative, focused on implementing and operationalising DigiCert One (SaaS) to improve certificate governance, automation, and compliance across the organisation.

n

The role will work closely with security, infrastructure, and application teams throughout phases of the program, while also providing BAU and operational support once the platform is live.

n

Required Skills & Experience

n

n
- Robust expertise in Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) concepts and operations
n
- Hands‑on experience with DigiCert One, including Trust Lifecycle Manager (TLM)
n
- Proven experience managing the full certificate lifecycle, including issuance, renewal, revocation, and expiration management
n
- Solid understanding of X.509 certificates, TLS/SSL, key pairs, and cryptographic algorithms
n
- Experience supporting enterprise‑scale PKI environments across hybrid (on‑prem and cloud) infrastructures
n




- Familiarity with certificate discovery, automation, and governance frameworks
n
- Strong troubleshooting skills for certificate‑related issues impacting applications, endpoints, and infrastructure
n
- Experience working with Windows and Linux operating systems in secure environments
n
- Understanding of security controls, encryption standards, and compliance requirements related to PKI
n
- Strong hands‑on experience with Hardware Security Modules (HSMs) and enterprise key management solutions.
n
- Proven experience implementing and managing HSM-backed PKI environments for Root CA, Intermediate CA, and certificate lifecycle management platforms.
n
- Knowledge of HSM concepts including key generation, secure key storage, key backup/recovery, partition management, and cryptographic operations.
n
- Experience integrating PKI platforms such as DigiCert One, Microsoft ADCS, Entrust, or similar solutions with HSM technologies.
n
- Understanding of cryptographic standards, key protection requirements, and compliance frameworks governing HSM usage.
n
- Experience supporting operational and troubleshooting activities related to enterprise HSM infrastructure.
n

#J-18808-Ljbffr

📌 Security Controls Validation Engineer (OPS)/PKI & HSM (Melbourne)
🏢 CareCone Group
📍 Melbourne